Input validation error in ISC BIND - CVE-2012-3817
Published: July 25, 2012 / Updated: July 24, 2020
Vulnerability identifier: #VU31842
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2012-3817
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.
Affected software
ISC BIND
Amazon Linux AMI
bind (Alpine package)
Amazon Linux AMI
bind (Alpine package)
How to mitigate CVE-2012-3817
Install update from vendor's website.
bind (Alpine package) - update to 9.7.6_p2-r0
External References
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2012-08/msg00013.html
- http://lists.opensuse.org/opensuse-updates/2012-08/msg00015.html
- http://rhn.redhat.com/errata/RHSA-2012-1122.html
- http://rhn.redhat.com/errata/RHSA-2012-1123.html
- http://secunia.com/advisories/51096
- http://support.apple.com/kb/HT5880
- http://www.debian.org/security/2012/dsa-2517
- http://www.securitytracker.com/id?1027296
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004
- http://www.ubuntu.com/usn/USN-1518-1
- https://kb.isc.org/article/AA-00729